rcourtman 85bf454ba3 Call plain HTTP critical only when Pulse is publicly reachable ...

The Security Overview tagged the HTTPS tile red and Critical on every
install, directly above a hardening card that calls HTTPS Recommended on
a private network and says local HTTP is acceptable. The same flag also
counted plain HTTP as a missing critical control in the posture score, so
a typical LAN install read 55 percent.

The tile now uses the hardening card's rule: critical once the instance
is publicly reachable, recommended otherwise. A private install with a
password and protected exports reads 79 percent, still Moderate, and a
public one still shows HTTPS as Critical.

2026-10-05 07:03:03 +01:00

..

internal

Preserve the published 6.4.6 packet's release-line mapping

2026-10-02 21:15:35 +01:00

v6

Call plain HTTP critical only when Pulse is publicly reachable

2026-10-05 07:03:03 +01:00

control_plane.json

Cut 6.5 and later releases from main

2026-10-04 18:37:43 +01:00

control_plane.schema.json

…